Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/096d0b41-2aee-37b5-b283-30030342ab50.roa
File:                     096d0b41-2aee-37b5-b283-30030342ab50.roa (raw, json)
Hash identifier:          g34IxTdDQ0FNqkOitIxh5l1cZ/DWkAi0JqvYAiRh3jw=
Subject key identifier:   63:06:1C:12:19:C2:27:CB:6F:6B:3B:9D:6F:86:2B:DA:F1:1E:F1:D9
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3D0BDFF8AF618D26F75250
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/096d0b41-2aee-37b5-b283-30030342ab50.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     22616
IP address blocks:        2605:4300:2a00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3d:0b:df:f8:af:61:8d:26:f7:52:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=845e828f-ea83-4865-94b6-e01509f315b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:eb:59:0d:1f:f4:f6:b9:9b:e5:bd:c3:e1:cb:
                    ad:43:b9:d8:74:70:42:81:a1:14:e0:f4:03:da:29:
                    75:6a:9b:3a:ec:83:bb:80:00:b5:ca:36:59:60:e2:
                    40:eb:b5:cd:ec:9b:6c:5f:ff:24:81:b4:6d:73:7b:
                    c0:ec:bf:42:42:f4:f4:da:f9:36:94:6f:73:72:83:
                    f2:3d:69:8b:cf:6a:bc:94:9f:69:52:f4:57:52:b5:
                    fe:e8:ce:ec:c1:e8:67:c8:d2:cc:1e:2e:7f:6b:ef:
                    f6:84:e2:90:7d:1c:e6:99:bc:70:8d:31:c8:a1:63:
                    ac:02:b4:b6:26:60:83:cd:64:2d:92:81:05:5b:cf:
                    0e:8c:8e:eb:4c:b7:ac:51:8d:40:3d:bb:d8:fe:ad:
                    50:a1:10:8f:09:20:d1:4a:ca:b2:c8:21:14:5c:8d:
                    60:3a:45:ed:3e:ea:33:8d:d0:ff:49:53:22:c6:87:
                    a3:8b:a4:ff:54:20:15:85:6c:a5:a0:fc:99:12:cd:
                    a8:4e:fc:12:ec:4e:1e:da:c9:7e:0d:12:2e:ad:d0:
                    2b:b0:06:8c:38:d3:2f:b7:88:a5:01:23:18:dd:e5:
                    fb:ca:17:71:eb:32:2c:e9:e3:80:a7:10:f1:03:b8:
                    cd:06:1b:b1:aa:8e:bf:61:e4:be:96:6e:54:a4:36:
                    8f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:06:1C:12:19:C2:27:CB:6F:6B:3B:9D:6F:86:2B:DA:F1:1E:F1:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/096d0b41-2aee-37b5-b283-30030342ab50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:fb:2e:5a:68:54:7f:c1:de:6b:d4:60:1d:2f:cd:d1:a3:37:
         2b:1a:b7:0c:bb:02:a4:69:69:7d:f9:56:3e:1c:96:dd:f4:ff:
         63:71:b0:ab:c3:28:c0:90:35:60:e6:2f:fb:cc:8a:82:a5:74:
         e6:e6:c8:ca:f1:e4:16:bb:5e:a6:8a:49:02:57:49:e3:29:da:
         06:51:75:55:99:15:20:d7:a6:84:1e:93:5a:de:b2:34:a0:ec:
         a3:d9:1f:77:e6:d4:f2:84:73:b4:17:3e:80:59:af:3a:94:24:
         f2:8d:db:63:9c:be:b5:19:ac:89:fa:d9:84:79:3d:da:e9:12:
         1e:01:0f:70:50:cd:49:8f:7d:57:94:51:7f:e1:3c:c8:f1:ad:
         82:4c:9e:13:3d:6a:a3:1a:ad:87:66:63:fd:77:62:1c:9e:6d:
         90:46:35:4c:0b:33:df:b5:40:4a:9a:aa:cc:f7:b8:fa:36:2b:
         00:4f:7e:12:e3:36:b4:67:18:54:8c:c8:87:da:38:ab:66:c8:
         8d:44:b1:b0:89:5f:23:f9:22:2e:83:4f:e7:ee:cd:70:28:38:
         9b:2a:98:82:54:d6:f4:32:78:d2:91:fd:16:f6:b5:81:33:af:
         33:c9:b7:7b:c9:47:61:6c:73:f4:38:a2:f1:8e:fe:a0:8b:5f:
         cd:66:33:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:41:06 2025 by rpki-client